DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
8a94540d2a9976396402167e91ac7bb00d189cfd79b08e8db79cff961831c476.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8a94540d2a9976396402167e91ac7bb00d189cfd79b08e8db79cff961831c476.dll
Resource
win10v2004-20221111-en
Target
8a94540d2a9976396402167e91ac7bb00d189cfd79b08e8db79cff961831c476
Size
53KB
MD5
44a4e70c3fc9aebbea3f55a6771547b6
SHA1
2da6661676bd1b9364255d9ef40c2365e0a86e36
SHA256
8a94540d2a9976396402167e91ac7bb00d189cfd79b08e8db79cff961831c476
SHA512
bec772f83dae17416a342f325f94c07f0d67a9a130030685dbee8d031089b090324df2def475ed46df5a813f74d50fdcb0df2b1c26db419f958e919efd803163
SSDEEP
768:jovrgYVgdjpQMLB3Se1t6vAZZ3mc0dOqhTIeSydYDft89dvpBebxmC1c2:jovbgIUQAZtJ8OIjBqgdBBMx51c2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ